| | |
script virus?? - Lost file & Program associations
![]() |
•
•
Join Date: Feb 2005
Posts: 6
Reputation:
Solved Threads: 0
Summary: My Win2K desktop machine boots fine, however, when it finishes booting, I am left with virtually all the file assocations gone! Even the Start>Run command prompt asks me to 'open with'.
The "open with" dialog box only shows the following:
- Internet Explorer
- Microsoft Management Console*
- Notepad
- Paint Shop Pro 9**
- Zone Labs Client
* this only appeared after I ran the Microsoft registry repair tool (http://support.microsoft.com/default...b;en-us;830570)
** PSP9 did not originally appear; I believe I right clicked on a .jpg file, and the menu gave me the option to 'open with psp9, which I did. The program opened up). However, .jpg files are not associated with any program)
SystemSuite (by V-Com) is the only program that remains available, and is the only icon on the lower right corner.
I experienced this same problem 3 months ago. Fortunately, SystemSuite allowed me to roll-back to an recent, albeit earlier, version of the registry. I do not have this option now.
I DO have my entire C Drive backed up (10 days old version) in uncompressed files on an external drive which I can access. Presumably there is a version of registry files there, but I do not know how to make them 'active'.
I *had* network connection to the desktop PC from a laptop, and at that point I could even use regedt32 on the laptop to network over and view the desktop's registry files. Only the following were shown from that machine:
- HKEY_Local_Machine
- HKey_Current_config
- HKey_Classes_Root
However, I lost network connection after I ran the Microsoft Registry repair tool.
((( I can still access the external disk drive, though.
I have also run the manual repair from the W2K system software disk, to no avail.
HOW IT HAPPENED: I had used AdSubtract to clear cache files. However, when I went back to my browser, I noticed that some page links on Craigslist were still highlighted, (i.e., cache files were still present). So I deleted cache and history directly from IE, but this still did not clear the files. I then used SystemSuite, and the program found Craigslist URL webfiles located in the Registry. I didn't pay attention, just deleted them, after which my system seemed to freeze. So I rebooted, and voila, no file or program associations.
SystemSuite techsupport thinks there was/is a script virus that did not activate until it was deleted.
By the way: I have TrendMicro and ZoneAlarm on the Desktop, and there was no warning of any virus prior to the problem. After the problem, and while I still had network connection, I ran McAfee from my notebook against the Desktop, and no viruses were found.
ANY HELP APPRECIATED!!!!
The "open with" dialog box only shows the following:
- Internet Explorer
- Microsoft Management Console*
- Notepad
- Paint Shop Pro 9**
- Zone Labs Client
* this only appeared after I ran the Microsoft registry repair tool (http://support.microsoft.com/default...b;en-us;830570)
** PSP9 did not originally appear; I believe I right clicked on a .jpg file, and the menu gave me the option to 'open with psp9, which I did. The program opened up). However, .jpg files are not associated with any program)
SystemSuite (by V-Com) is the only program that remains available, and is the only icon on the lower right corner.
I experienced this same problem 3 months ago. Fortunately, SystemSuite allowed me to roll-back to an recent, albeit earlier, version of the registry. I do not have this option now.
I DO have my entire C Drive backed up (10 days old version) in uncompressed files on an external drive which I can access. Presumably there is a version of registry files there, but I do not know how to make them 'active'.
I *had* network connection to the desktop PC from a laptop, and at that point I could even use regedt32 on the laptop to network over and view the desktop's registry files. Only the following were shown from that machine:
- HKEY_Local_Machine
- HKey_Current_config
- HKey_Classes_Root
However, I lost network connection after I ran the Microsoft Registry repair tool.
((( I can still access the external disk drive, though.I have also run the manual repair from the W2K system software disk, to no avail.
HOW IT HAPPENED: I had used AdSubtract to clear cache files. However, when I went back to my browser, I noticed that some page links on Craigslist were still highlighted, (i.e., cache files were still present). So I deleted cache and history directly from IE, but this still did not clear the files. I then used SystemSuite, and the program found Craigslist URL webfiles located in the Registry. I didn't pay attention, just deleted them, after which my system seemed to freeze. So I rebooted, and voila, no file or program associations.
SystemSuite techsupport thinks there was/is a script virus that did not activate until it was deleted.
By the way: I have TrendMicro and ZoneAlarm on the Desktop, and there was no warning of any virus prior to the problem. After the problem, and while I still had network connection, I ran McAfee from my notebook against the Desktop, and no viruses were found.
ANY HELP APPRECIATED!!!!
Last edited by Kollin; May 23rd, 2005 at 9:49 pm. Reason: forgot to mention
•
•
Join Date: Jul 2004
Posts: 2,964
Reputation:
Solved Threads: 210
Hi Kollin, sorry for the delay in responding to this. I can't really help much with the problem other then to suggest this:
http://www.microsoft.com/windows2000..._last_good.htm
http://www.microsoft.com/windows2000..._last_good.htm
Links to help you help yourself :
Protect Your PC & Avoid Infections -- http://www.daniweb.com/techtalkforums/thread27519.html
Cleanup Procedures & Tools -- http://www.daniweb.com/techtalkforums/thread27570.html
Infection Removal & HijackThis Use -- http://www.daniweb.com/techtalkforums/thread28196.html
Protect Your PC & Avoid Infections -- http://www.daniweb.com/techtalkforums/thread27519.html
Cleanup Procedures & Tools -- http://www.daniweb.com/techtalkforums/thread27570.html
Infection Removal & HijackThis Use -- http://www.daniweb.com/techtalkforums/thread28196.html
![]() |
Similar Threads
- Virus scanner file(php) cannot be executed (PHP)
- Lost all file program associations (Windows NT / 2000 / XP)
- Yikes! Lost File & Program Associations! W2K (Windows NT / 2000 / XP)
- Lost a file(internet.exe) in my win2K system! (Windows NT / 2000 / XP)
Other Threads in the Viruses, Spyware and other Nasties Forum
- Previous Thread: TROJAN-SPY.HTML.SMITFRAUD.c
- Next Thread: For maynd: Error 317 message
| Thread Tools | Search this Thread |
Tag cloud for Viruses, Spyware and other Nasties
acrobat adobe adware anti-malware anti-virussitesaccessissue antivirus apple attack avg backtoschoolspeech bar blackhat botnet botnets censorship china commercial commercials conficker connect control crosssitescripting cyber cybercrime ddos e-mafia education email europe exam exploit fake fancheckvirus gaming gtaiv gumblar halloween herss.exe hijack hosting internet kaspersky legal mail malware mcafee messagelabs microsoft mobile nazi news obama onlinethreats paedophile parents patch pdf phishing police policeprovirusmba-mblockedinternetaccess president pro problem redirect reliability report research risk rogueantivirus samhain sans school search security seopoisoning sites software spam spyware spywareexternalwindows7adminstratortrojans sqlinjection symantec teen threat translate trojan unwanted update usa virus viruses vista volume war warning windows worm yahoo zero-day zeroday






